After entering wrong username, the 'Welcome'-screen will load very long

ErazerMe 46 Reputation points
2021-08-31T14:27:49.057+00:00

After entering a wrong username (domain joined) to a Windows 10 Client, the 'Welcome'-screen will be shown for round about 3-4 minutes until the error message 'The user name or password is incorrect'.
Does anybody know, if this long delay is a default behaviour of Windows 10? I am not exactly sure, but I think Windows 7 didn't take that long to verify username.

During my troubleshooting, I noticed that the client is contacting each domain controller in our domain over LDAP (lsass.exe) and this will take a long time.
In our enviroment, we have round about 22 Domain Controller.
Is there any possibility to speed up the "username" checking and maybe we can restrict the client to check the username only to a few domain controller (nearest 3 dcs)?

If this behaviour is default, may someone can give me a note where I read the default process - because I have to provide a solution/answer to our users.

Thanks a lot.

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,708 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,936 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,767 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,732 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Reza-Ameri 16,836 Reputation points
    2021-08-31T15:07:09.277+00:00

    You may try enable the cache account.
    In the Group Policy navigate to Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options and there is a policy called Interactive logon: Number of previous logons to cache (in case domain controller is not available) and this could speed up login.

    0 comments
  2. Limitless Technology 39,396 Reputation points
    2021-08-31T17:57:33.61+00:00

    Hello @ErazerMe

    I would suggest you to have a look on below Microsoft blog explaining the same.

    https://devblogs.microsoft.com/oldnewthing/20100323-00/?p=14513

    If the reply was helpful, please don’t forget to upvote or accept as answer.

    Thanks,